@dreamboard-games/cli 0.1.30-alpha.17 → 0.1.30-alpha.18

package/dist/agent-verifier/{compile-SDQ25N7K.mjs → compile-VOBO2I6D.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   resolveRemoteProject
-} from "./chunk-5GCZZ6NW.mjs";
+} from "./chunk-JB7VXCMB.mjs";
 import {
   CONFIG_FLAG_ARGS,
   defineCommand,
@@ -9,7 +9,7 @@ import {
   parseCompileCommandArgs,
   queueProjectRevisionCompileSdk,
   waitForCompiledResultJobSdk
-} from "./chunk-A67WUYN2.mjs";
+} from "./chunk-B42OHJNY.mjs";
 import {
   getProjectAuthoringState,
   getProjectPendingAuthoringSync,
@@ -20,33 +20,33 @@ import {
 } from "./chunk-POBFNXD4.mjs";
 import {
   formatCliError
-} from "./chunk-G2ECODRB.mjs";
+} from "./chunk-PLXXH5LY.mjs";
 import {
   assertCompilerPortableDependencies,
   assertReleaseEnvironmentPortableDependencies,
   consola,
   resolveProjectContext
-} from "./chunk-NFL3Z4Z7.mjs";
+} from "./chunk-RP7ZWFVH.mjs";
 import {
   updateProjectState
 } from "./chunk-WSIYUUSD.mjs";
-import "./chunk-CO3BRUD6.mjs";
-import "./chunk-DPYC2NDB.mjs";
-import "./chunk-AXXUGU7Q.mjs";
+import "./chunk-AG5J3SMN.mjs";
+import "./chunk-RCYO6HWW.mjs";
+import "./chunk-AQ6UQHPT.mjs";
 import {
   getLocalDiff
-} from "./chunk-LKQ557TJ.mjs";
+} from "./chunk-334H4LE4.mjs";
 import "./chunk-TAEQKBJB.mjs";
 import {
   assertCliStaticScaffoldComplete
-} from "./chunk-S4ZQSUPB.mjs";
+} from "./chunk-PWPOLHTW.mjs";
 import "./chunk-F2DIOJJZ.mjs";
 import "./chunk-RDYXWXXC.mjs";
-import "./chunk-H3XNWKJU.mjs";
+import "./chunk-7LFDFXLS.mjs";
 import "./chunk-JZTH3EMV.mjs";
 import "./chunk-TTB7AIHZ.mjs";
 import "./chunk-MYMVXTZT.mjs";
-import "./chunk-WAFBU5U7.mjs";
+import "./chunk-OJFZVGEL.mjs";
 import "./chunk-ZEELHSY3.mjs";
 import "./chunk-M7UVBANQ.mjs";
 import "./chunk-H6XDQJ3N.mjs";
@@ -314,4 +314,4 @@ var compile_default = defineCommand({
 export {
   compile_default as default
 };
-//# sourceMappingURL=compile-SDQ25N7K.mjs.map
+//# sourceMappingURL=compile-VOBO2I6D.mjs.map

package/dist/agent-verifier/{global-config-6UGFPLDA.mjs → global-config-L7PLLUK5.mjs}

@@ -4,8 +4,8 @@ import {
   getGlobalConfigPath,
   loadGlobalConfig,
   saveGlobalConfig
-} from "./chunk-DPYC2NDB.mjs";
-import "./chunk-AXXUGU7Q.mjs";
+} from "./chunk-RCYO6HWW.mjs";
+import "./chunk-AQ6UQHPT.mjs";
 import "./chunk-TAEQKBJB.mjs";
 import "./chunk-RDYXWXXC.mjs";
 import "./chunk-M7UVBANQ.mjs";
@@ -16,4 +16,4 @@ export {
   loadGlobalConfig,
   saveGlobalConfig
 };
-//# sourceMappingURL=global-config-6UGFPLDA.mjs.map
+//# sourceMappingURL=global-config-L7PLLUK5.mjs.map

package/dist/agent-verifier/{keychain-backend-BQLW5VEC.mjs → keychain-backend-UF3Z26JM.mjs}

@@ -137,4 +137,4 @@ export {
   _setKeyringModuleForTests,
   tryKeychainBackend
 };
-//# sourceMappingURL=keychain-backend-BQLW5VEC.mjs.map
+//# sourceMappingURL=keychain-backend-UF3Z26JM.mjs.map

package/dist/agent-verifier/keychain-backend-UF3Z26JM.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/config/keychain-backend.ts"],"sourcesContent":["/**\n * OS keychain-backed `CredentialBackend` built on top of `@napi-rs/keyring`.\n *\n * Keychain is an optional storage backend. Users can opt in with\n * `credentialBackend: \"keychain\"` in `~/.dreamboard/config.json`\n * (see `credential-store.ts` for the resolver).\n * When enabled, it gives us:\n * - A refresh token encrypted at rest by the OS (Keychain on macOS,\n *   Credential Vault on Windows, Secret Service on Linux).\n * - Protection against other processes running as the same user tailing\n *   `~/.dreamboard/auth.json` to scrape the token.\n *\n * This module is loaded optionally: `@napi-rs/keyring` is declared as an\n * `optionalDependencies` entry. If the native binary or OS keyring is\n * unavailable, the resolver falls back to the file backend.\n *\n * One-time migration: when the active backend is keychain and `auth.json` still\n * has tokens, `credential-store.ts` copies them into the keychain, verifies the\n * keychain read, and deletes the file. This is the only path that intentionally\n * mutates both backends.\n */\n\nimport type {\n  CredentialBackend,\n  Credentials,\n  StoredSessionSnapshot,\n} from \"./credential-store.js\";\n\n/** Keychain service id. Shared across all Dreamboard CLI builds. */\nconst KEYCHAIN_SERVICE = \"dreamboard-cli\";\n/**\n * Keychain account id. The `user@host` shape is conventional but we keep\n * it fixed for now because the CLI only cares about \"the session for this\n * OS user\", not per-process sessions.\n */\nconst KEYCHAIN_ACCOUNT = \"session\";\n\ntype EntryInstance = {\n  setPassword(value: string): void;\n  getPassword(): string | null | undefined;\n  deletePassword(): boolean;\n};\n\ntype KeyringModule = {\n  Entry: new (service: string, account: string) => EntryInstance;\n};\n\nlet cachedModule: KeyringModule | null | undefined;\n\nasync function loadKeyringModule(): Promise<KeyringModule | null> {\n  if (cachedModule !== undefined) return cachedModule;\n  try {\n    // `@napi-rs/keyring` is an optional dependency. If the native binary is\n    // missing on this platform the dynamic import throws; resolver policy in\n    // credential-store decides whether that is fatal.\n    const mod = (await import(\"@napi-rs/keyring\")) as unknown as KeyringModule;\n    cachedModule = mod;\n  } catch {\n    cachedModule = null;\n  }\n  return cachedModule;\n}\n\nfunction keychainProbe(entry: EntryInstance): boolean {\n  // Some platforms have the module installed but no accessible keyring\n  // (e.g. headless Linux without DBus). Touch getPassword to verify we\n  // can talk to the service without side effects.\n  try {\n    entry.getPassword();\n    return true;\n  } catch {\n    return false;\n  }\n}\n\ntype KeychainPayload = {\n  clerkAccessToken?: string;\n  accessToken?: string;\n  refreshToken?: string;\n  clerkAccessExpiresAt?: string;\n  tokenExpiresAt?: string;\n  dreamboardApiToken?: string;\n  dreamboardApiExpiresAt?: string;\n  clerkOAuthIssuer?: string;\n  clerkOAuthClientId?: string;\n  clerkOAuthTokenUrl?: string;\n  environment?: string;\n};\n\nfunction parsePayload(\n  raw: string | null | undefined,\n): StoredSessionSnapshot | null {\n  if (raw === null || raw === undefined) return null;\n  const trimmed = raw.trim();\n  if (trimmed.length === 0) return null;\n  try {\n    const parsed = JSON.parse(trimmed) as KeychainPayload;\n    const accessToken = parsed.clerkAccessToken ?? parsed.accessToken;\n    if (!accessToken && !parsed.refreshToken) return null;\n    return {\n      accessToken: accessToken || undefined,\n      refreshToken: parsed.refreshToken || undefined,\n      tokenExpiresAt:\n        parsed.clerkAccessExpiresAt || parsed.tokenExpiresAt || undefined,\n      dreamboardApiToken: parsed.dreamboardApiToken || undefined,\n      dreamboardApiExpiresAt: parsed.dreamboardApiExpiresAt || undefined,\n      clerkOAuthIssuer: parsed.clerkOAuthIssuer || undefined,\n      clerkOAuthClientId: parsed.clerkOAuthClientId || undefined,\n      clerkOAuthTokenUrl: parsed.clerkOAuthTokenUrl || undefined,\n      environment: parsed.environment || undefined,\n    };\n  } catch {\n    return null;\n  }\n}\n\nfunction writeFull(entry: EntryInstance, creds: Credentials): void {\n  if (!creds.accessToken || !creds.refreshToken) {\n    throw new Error(\n      \"Refusing to persist credentials with an empty accessToken or refreshToken.\",\n    );\n  }\n  const payload: KeychainPayload = {\n    clerkAccessToken: creds.accessToken,\n    refreshToken: creds.refreshToken,\n    clerkAccessExpiresAt: creds.tokenExpiresAt,\n    dreamboardApiToken: creds.dreamboardApiToken,\n    dreamboardApiExpiresAt: creds.dreamboardApiExpiresAt,\n    clerkOAuthIssuer: creds.clerkOAuthIssuer,\n    clerkOAuthClientId: creds.clerkOAuthClientId,\n    clerkOAuthTokenUrl: creds.clerkOAuthTokenUrl,\n    environment: creds.environment,\n  };\n  entry.setPassword(JSON.stringify(payload));\n}\n\nfunction writeAccessOnly(entry: EntryInstance, accessToken: string): void {\n  if (!accessToken) {\n    throw new Error(\"Refusing to persist an empty access token.\");\n  }\n  const payload: KeychainPayload = { accessToken };\n  entry.setPassword(JSON.stringify(payload));\n}\n\nfunction clear(entry: EntryInstance): void {\n  try {\n    entry.deletePassword();\n  } catch {\n    // keyring-rs throws when the entry does not exist. That is fine -\n    // `clearCredentials` contracts as idempotent.\n  }\n}\n\nexport type KeychainAvailability =\n  | { available: true; backend: CredentialBackend }\n  | { available: false; reason: string };\n\n/**\n * Attempt to construct a keychain-backed `CredentialBackend`. Returns an\n * `available: false` result (with a reason) if the native module, the\n * OS keyring, or the probe fails.\n */\nexport async function tryKeychainBackend(): Promise<KeychainAvailability> {\n  const mod = await loadKeyringModule();\n  if (!mod) {\n    return {\n      available: false,\n      reason: \"@napi-rs/keyring is not installed for this platform\",\n    };\n  }\n\n  let entry: EntryInstance;\n  try {\n    entry = new mod.Entry(KEYCHAIN_SERVICE, KEYCHAIN_ACCOUNT);\n  } catch (err) {\n    return {\n      available: false,\n      reason: `Failed to construct keyring entry: ${String((err as Error).message ?? err)}`,\n    };\n  }\n\n  if (!keychainProbe(entry)) {\n    return {\n      available: false,\n      reason: \"OS keyring is not accessible from this process\",\n    };\n  }\n\n  const backend: CredentialBackend = {\n    name: \"keychain\",\n    async read() {\n      try {\n        return parsePayload(entry.getPassword());\n      } catch (err) {\n        const message = String((err as Error).message ?? err);\n        // Transient keychain access errors (e.g. Touch ID prompt\n        // cancelled) should not surface as \"session wiped\". Treat the\n        // unreadable state as \"no session\" so the caller can fall back\n        // to prompting for login.\n        if (/no matching entry|not found/i.test(message)) {\n          return null;\n        }\n        throw err;\n      }\n    },\n    async writeFull(creds) {\n      writeFull(entry, creds);\n    },\n    async writeAccessOnly(accessToken) {\n      writeAccessOnly(entry, accessToken);\n    },\n    async clear() {\n      clear(entry);\n    },\n  };\n  return { available: true, backend };\n}\n\n/**\n * Test-only escape hatch so unit tests can install a fake keyring module\n * without going through the dynamic import cache.\n */\nexport function _setKeyringModuleForTests(mod: KeyringModule | null): void {\n  cachedModule = mod;\n}\n\nexport function _resetKeyringModuleForTests(): void {\n  cachedModule = undefined;\n}\n"],"mappings":";;;;AA6BA,IAAM,mBAAmB;AAMzB,IAAM,mBAAmB;AAYzB,IAAI;AAEJ,eAAe,oBAAmD;AAChE,MAAI,iBAAiB,OAAW,QAAO;AACvC,MAAI;AAIF,UAAM,MAAO,MAAM,OAAO,kBAAkB;AAC5C,mBAAe;AAAA,EACjB,QAAQ;AACN,mBAAe;AAAA,EACjB;AACA,SAAO;AACT;AAEA,SAAS,cAAc,OAA+B;AAIpD,MAAI;AACF,UAAM,YAAY;AAClB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAgBA,SAAS,aACP,KAC8B;AAC9B,MAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAC9C,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,UAAM,cAAc,OAAO,oBAAoB,OAAO;AACtD,QAAI,CAAC,eAAe,CAAC,OAAO,aAAc,QAAO;AACjD,WAAO;AAAA,MACL,aAAa,eAAe;AAAA,MAC5B,cAAc,OAAO,gBAAgB;AAAA,MACrC,gBACE,OAAO,wBAAwB,OAAO,kBAAkB;AAAA,MAC1D,oBAAoB,OAAO,sBAAsB;AAAA,MACjD,wBAAwB,OAAO,0BAA0B;AAAA,MACzD,kBAAkB,OAAO,oBAAoB;AAAA,MAC7C,oBAAoB,OAAO,sBAAsB;AAAA,MACjD,oBAAoB,OAAO,sBAAsB;AAAA,MACjD,aAAa,OAAO,eAAe;AAAA,IACrC;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,OAAsB,OAA0B;AACjE,MAAI,CAAC,MAAM,eAAe,CAAC,MAAM,cAAc;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,UAA2B;AAAA,IAC/B,kBAAkB,MAAM;AAAA,IACxB,cAAc,MAAM;AAAA,IACpB,sBAAsB,MAAM;AAAA,IAC5B,oBAAoB,MAAM;AAAA,IAC1B,wBAAwB,MAAM;AAAA,IAC9B,kBAAkB,MAAM;AAAA,IACxB,oBAAoB,MAAM;AAAA,IAC1B,oBAAoB,MAAM;AAAA,IAC1B,aAAa,MAAM;AAAA,EACrB;AACA,QAAM,YAAY,KAAK,UAAU,OAAO,CAAC;AAC3C;AAEA,SAAS,gBAAgB,OAAsB,aAA2B;AACxE,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,QAAM,UAA2B,EAAE,YAAY;AAC/C,QAAM,YAAY,KAAK,UAAU,OAAO,CAAC;AAC3C;AAEA,SAAS,MAAM,OAA4B;AACzC,MAAI;AACF,UAAM,eAAe;AAAA,EACvB,QAAQ;AAAA,EAGR;AACF;AAWA,eAAsB,qBAAoD;AACxE,QAAM,MAAM,MAAM,kBAAkB;AACpC,MAAI,CAAC,KAAK;AACR,WAAO;AAAA,MACL,WAAW;AAAA,MACX,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,YAAQ,IAAI,IAAI,MAAM,kBAAkB,gBAAgB;AAAA,EAC1D,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,WAAW;AAAA,MACX,QAAQ,sCAAsC,OAAQ,IAAc,WAAW,GAAG,CAAC;AAAA,IACrF;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,KAAK,GAAG;AACzB,WAAO;AAAA,MACL,WAAW;AAAA,MACX,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,UAA6B;AAAA,IACjC,MAAM;AAAA,IACN,MAAM,OAAO;AACX,UAAI;AACF,eAAO,aAAa,MAAM,YAAY,CAAC;AAAA,MACzC,SAAS,KAAK;AACZ,cAAM,UAAU,OAAQ,IAAc,WAAW,GAAG;AAKpD,YAAI,+BAA+B,KAAK,OAAO,GAAG;AAChD,iBAAO;AAAA,QACT;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,MAAM,UAAU,OAAO;AACrB,gBAAU,OAAO,KAAK;AAAA,IACxB;AAAA,IACA,MAAM,gBAAgB,aAAa;AACjC,sBAAgB,OAAO,WAAW;AAAA,IACpC;AAAA,IACA,MAAM,QAAQ;AACZ,YAAM,KAAK;AAAA,IACb;AAAA,EACF;AACA,SAAO,EAAE,WAAW,MAAM,QAAQ;AACpC;AAMO,SAAS,0BAA0B,KAAiC;AACzE,iBAAe;AACjB;AAEO,SAAS,8BAAoC;AAClD,iBAAe;AACjB;","names":[]}

package/dist/agent-verifier/{local-files-WPHUV6GU.mjs → local-files-DAFIR7SN.mjs}

@@ -14,15 +14,15 @@ import {
   writeSnapshot,
   writeSnapshotFromFiles,
   writeSourceFiles
-} from "./chunk-LKQ557TJ.mjs";
+} from "./chunk-334H4LE4.mjs";
 import "./chunk-TAEQKBJB.mjs";
 import {
   computeManifestHash
-} from "./chunk-H3XNWKJU.mjs";
+} from "./chunk-7LFDFXLS.mjs";
 import "./chunk-JZTH3EMV.mjs";
 import "./chunk-TTB7AIHZ.mjs";
 import "./chunk-MYMVXTZT.mjs";
-import "./chunk-WAFBU5U7.mjs";
+import "./chunk-OJFZVGEL.mjs";
 import "./chunk-M7UVBANQ.mjs";
 import "./chunk-H6XDQJ3N.mjs";
 export {
@@ -42,4 +42,4 @@ export {
   writeSnapshotFromFiles,
   writeSourceFiles
 };
-//# sourceMappingURL=local-files-WPHUV6GU.mjs.map
+//# sourceMappingURL=local-files-DAFIR7SN.mjs.map

package/dist/agent-verifier/{materialize-workspace-ENPMB66P.mjs → materialize-workspace-PAC75NSP.mjs}

@@ -10,23 +10,23 @@ import {
   writeManifest,
   writeRule,
   writeSnapshot
-} from "./chunk-LKQ557TJ.mjs";
+} from "./chunk-334H4LE4.mjs";
 import "./chunk-TAEQKBJB.mjs";
 import {
   scaffoldStaticWorkspace
-} from "./chunk-S4ZQSUPB.mjs";
+} from "./chunk-PWPOLHTW.mjs";
 import "./chunk-F2DIOJJZ.mjs";
 import {
   ensureDir
 } from "./chunk-RDYXWXXC.mjs";
-import "./chunk-H3XNWKJU.mjs";
+import "./chunk-7LFDFXLS.mjs";
 import "./chunk-JZTH3EMV.mjs";
 import "./chunk-TTB7AIHZ.mjs";
 import "./chunk-MYMVXTZT.mjs";
 import {
   applyWorkspaceCodegen
-} from "./chunk-V6AQDR7W.mjs";
-import "./chunk-WAFBU5U7.mjs";
+} from "./chunk-HUBV22JQ.mjs";
+import "./chunk-OJFZVGEL.mjs";
 import {
   installWorkspaceDependencies
 } from "./chunk-V7ABTZXW.mjs";
@@ -87,4 +87,4 @@ function baseProjectConfig(input) {
 export {
   materializeWorkspaceProject
 };
-//# sourceMappingURL=materialize-workspace-ENPMB66P.mjs.map
+//# sourceMappingURL=materialize-workspace-PAC75NSP.mjs.map

package/dist/agent-verifier/{reducer-native-test-harness-GY2CCQWN.mjs → reducer-native-test-harness-HSXRUGOR.mjs}

@@ -16,20 +16,20 @@ import {
   replayScenarioThroughBackend,
   runReducerNativeScenarios,
   writeReducerNativeGeneratedFiles
-} from "./chunk-DWLTCUUX.mjs";
+} from "./chunk-7MAOGFFP.mjs";
 import "./chunk-QD4SQNUP.mjs";
-import "./chunk-G2ECODRB.mjs";
-import "./chunk-CO3BRUD6.mjs";
-import "./chunk-AXXUGU7Q.mjs";
-import "./chunk-LKQ557TJ.mjs";
+import "./chunk-PLXXH5LY.mjs";
+import "./chunk-AG5J3SMN.mjs";
+import "./chunk-AQ6UQHPT.mjs";
+import "./chunk-334H4LE4.mjs";
 import "./chunk-TAEQKBJB.mjs";
 import "./chunk-F2DIOJJZ.mjs";
 import "./chunk-RDYXWXXC.mjs";
-import "./chunk-H3XNWKJU.mjs";
+import "./chunk-7LFDFXLS.mjs";
 import "./chunk-JZTH3EMV.mjs";
 import "./chunk-TTB7AIHZ.mjs";
 import "./chunk-MYMVXTZT.mjs";
-import "./chunk-WAFBU5U7.mjs";
+import "./chunk-OJFZVGEL.mjs";
 import "./chunk-M7UVBANQ.mjs";
 import "./chunk-H6XDQJ3N.mjs";
 export {
@@ -50,4 +50,4 @@ export {
   runReducerNativeScenarios,
   writeReducerNativeGeneratedFiles
 };
-//# sourceMappingURL=reducer-native-test-harness-GY2CCQWN.mjs.map
+//# sourceMappingURL=reducer-native-test-harness-HSXRUGOR.mjs.map

package/dist/agent-verifier/{static-scaffold-K52P52SV.mjs → static-scaffold-KSOTKJNQ.mjs}

@@ -4,14 +4,14 @@ import {
   migrateLegacyScenarioImports,
   resolveStaticAssetRoot,
   scaffoldStaticWorkspace
-} from "./chunk-S4ZQSUPB.mjs";
+} from "./chunk-PWPOLHTW.mjs";
 import "./chunk-F2DIOJJZ.mjs";
 import "./chunk-RDYXWXXC.mjs";
-import "./chunk-H3XNWKJU.mjs";
+import "./chunk-7LFDFXLS.mjs";
 import "./chunk-JZTH3EMV.mjs";
 import "./chunk-TTB7AIHZ.mjs";
 import "./chunk-MYMVXTZT.mjs";
-import "./chunk-WAFBU5U7.mjs";
+import "./chunk-OJFZVGEL.mjs";
 import "./chunk-ZEELHSY3.mjs";
 import "./chunk-M7UVBANQ.mjs";
 import "./chunk-H6XDQJ3N.mjs";
@@ -21,4 +21,4 @@ export {
   resolveStaticAssetRoot,
   scaffoldStaticWorkspace
 };
-//# sourceMappingURL=static-scaffold-K52P52SV.mjs.map
+//# sourceMappingURL=static-scaffold-KSOTKJNQ.mjs.map

package/dist/agent-verifier/{sync-JSATJXVJ.mjs → sync-MQJJEZAA.mjs}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-HLHT57AW.mjs";
 import {
   resolveRemoteProject
-} from "./chunk-5GCZZ6NW.mjs";
+} from "./chunk-JB7VXCMB.mjs";
 import {
   CONFIG_FLAG_ARGS,
   createGameRevisionSdk,
@@ -16,7 +16,7 @@ import {
   materializeSourceChangeOperations,
   parseSyncCommandArgs,
   uploadProjectSourceBlobsSdk
-} from "./chunk-A67WUYN2.mjs";
+} from "./chunk-B42OHJNY.mjs";
 import {
   getProjectAuthoringState,
   getProjectLocalMaintainerRegistry,
@@ -28,40 +28,40 @@ import {
   runLocalTypecheck
 } from "./chunk-POBFNXD4.mjs";
 import "./chunk-QD4SQNUP.mjs";
-import "./chunk-G2ECODRB.mjs";
+import "./chunk-PLXXH5LY.mjs";
 import {
   assertReleaseEnvironmentPortableDependencies,
   consola,
   resolveProjectContext
-} from "./chunk-NFL3Z4Z7.mjs";
+} from "./chunk-RP7ZWFVH.mjs";
 import {
   updateProjectState
 } from "./chunk-WSIYUUSD.mjs";
-import "./chunk-CO3BRUD6.mjs";
-import "./chunk-DPYC2NDB.mjs";
 import {
   BUILD_CHANNEL,
   IS_PUBLISHED_BUILD
-} from "./chunk-AXXUGU7Q.mjs";
+} from "./chunk-AG5J3SMN.mjs";
+import "./chunk-RCYO6HWW.mjs";
+import "./chunk-AQ6UQHPT.mjs";
 import {
   collectLocalFiles,
   getLocalDiff,
   loadManifest,
   loadRule,
   writeSnapshot
-} from "./chunk-LKQ557TJ.mjs";
+} from "./chunk-334H4LE4.mjs";
 import "./chunk-TAEQKBJB.mjs";
 import {
   assertCliStaticScaffoldComplete,
   scaffoldStaticWorkspace
-} from "./chunk-S4ZQSUPB.mjs";
+} from "./chunk-PWPOLHTW.mjs";
 import "./chunk-F2DIOJJZ.mjs";
 import "./chunk-RDYXWXXC.mjs";
 import {
   computeManifestHash,
   isAllowedGamePath,
   isDynamicGeneratedPath
-} from "./chunk-H3XNWKJU.mjs";
+} from "./chunk-7LFDFXLS.mjs";
 import "./chunk-JZTH3EMV.mjs";
 import {
   resolveCliRepoRoot
@@ -69,8 +69,8 @@ import {
 import "./chunk-MYMVXTZT.mjs";
 import {
   applyWorkspaceCodegen
-} from "./chunk-V6AQDR7W.mjs";
-import "./chunk-WAFBU5U7.mjs";
+} from "./chunk-HUBV22JQ.mjs";
+import "./chunk-OJFZVGEL.mjs";
 import {
   reconcileWorkspaceDependencies
 } from "./chunk-V7ABTZXW.mjs";
@@ -595,4 +595,4 @@ var sync_default = defineCommand({
 export {
   sync_default as default
 };
-//# sourceMappingURL=sync-JSATJXVJ.mjs.map
+//# sourceMappingURL=sync-MQJJEZAA.mjs.map

package/dist/agent-verifier/{test-LQAGEQLY.mjs → test-R6HC6CYZ.mjs}

@@ -6,7 +6,7 @@ import {
   getProjectCompiledResultSdk,
   parseConfigFlags,
   uploadInitialProjectionSdk
-} from "./chunk-A67WUYN2.mjs";
+} from "./chunk-B42OHJNY.mjs";
 import {
   getProjectAuthoringState,
   getProjectCompileState,
@@ -16,35 +16,35 @@ import {
   generateReducerNativeArtifacts,
   isReducerNativeTestingWorkspace,
   runReducerNativeScenarios
-} from "./chunk-DWLTCUUX.mjs";
+} from "./chunk-7MAOGFFP.mjs";
 import "./chunk-QD4SQNUP.mjs";
 import {
   STALE_CONTRACT_ARTIFACT_CODE,
   STALE_CONTRACT_ARTIFACT_EXIT_CODE,
   isDreamboardApiError,
   isStaleContractArtifactMessage
-} from "./chunk-G2ECODRB.mjs";
+} from "./chunk-PLXXH5LY.mjs";
 import {
   assertReleaseEnvironmentPortableDependencies,
   configureClient,
   consola,
   resolveProjectContext
-} from "./chunk-NFL3Z4Z7.mjs";
+} from "./chunk-RP7ZWFVH.mjs";
 import "./chunk-WSIYUUSD.mjs";
-import "./chunk-CO3BRUD6.mjs";
-import "./chunk-DPYC2NDB.mjs";
 import {
   IS_PUBLISHED_BUILD
-} from "./chunk-AXXUGU7Q.mjs";
-import "./chunk-LKQ557TJ.mjs";
+} from "./chunk-AG5J3SMN.mjs";
+import "./chunk-RCYO6HWW.mjs";
+import "./chunk-AQ6UQHPT.mjs";
+import "./chunk-334H4LE4.mjs";
 import "./chunk-TAEQKBJB.mjs";
 import "./chunk-F2DIOJJZ.mjs";
 import "./chunk-RDYXWXXC.mjs";
-import "./chunk-H3XNWKJU.mjs";
+import "./chunk-7LFDFXLS.mjs";
 import "./chunk-JZTH3EMV.mjs";
 import "./chunk-TTB7AIHZ.mjs";
 import "./chunk-MYMVXTZT.mjs";
-import "./chunk-WAFBU5U7.mjs";
+import "./chunk-OJFZVGEL.mjs";
 import "./chunk-M7UVBANQ.mjs";
 import "./chunk-H6XDQJ3N.mjs";
 
@@ -353,4 +353,4 @@ export {
   resolveRequestedRunner,
   resolveTestRunExitCode
 };
-//# sourceMappingURL=test-LQAGEQLY.mjs.map
+//# sourceMappingURL=test-R6HC6CYZ.mjs.map

package/dist/agent-verifier/{workspace-codegen-4IWICKLB.mjs → workspace-codegen-SPPVHURX.mjs}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   applyWorkspaceCodegen
-} from "./chunk-V6AQDR7W.mjs";
-import "./chunk-WAFBU5U7.mjs";
+} from "./chunk-HUBV22JQ.mjs";
+import "./chunk-OJFZVGEL.mjs";
 import "./chunk-H6XDQJ3N.mjs";
 export {
   applyWorkspaceCodegen
 };
-//# sourceMappingURL=workspace-codegen-4IWICKLB.mjs.map
+//# sourceMappingURL=workspace-codegen-SPPVHURX.mjs.map

package/dist/authoring-compatibility-internal.js

@@ -2,7 +2,7 @@
 import {
   applyWorkspaceCodegen,
   materializeWorkspaceProject
-} from "./chunk-LWJUF42S.js";
+} from "./chunk-2XMBZPL5.js";
 import "./chunk-FFO2IJL3.js";
 import "./chunk-2H7UOFLK.js";
 export {

package/dist/{chunk-ITT6Y7MM.js → chunk-2WB3DYW4.js}

@@ -27,16 +27,13 @@ import {
   writeWorkspaceJsonFile,
   writeWorkspaceTextFile,
   zProblemDetails
-} from "./chunk-LWJUF42S.js";
+} from "./chunk-2XMBZPL5.js";
 import {
-  BUILD_CHANNEL,
-  IS_PUBLISHED_BUILD,
-  PUBLISHED_ENVIRONMENT,
   getStoredSession,
   loadGlobalConfig,
   setCredentials,
   withCredentialLock
-} from "./chunk-AVOAT522.js";
+} from "./chunk-J3CWZHY7.js";
 import {
   DEFAULT_API_BASE_URL,
   DEFAULT_WEB_BASE_URL,
@@ -48,6 +45,12 @@ import {
   writeJsonFile
 } from "./chunk-FFO2IJL3.js";
 
+// src/build-target.ts
+var injectedBuildChannel = true ? "published" : void 0;
+var BUILD_CHANNEL = injectedBuildChannel === "published" ? "published" : "development";
+var IS_PUBLISHED_BUILD = BUILD_CHANNEL === "published";
+var PUBLISHED_ENVIRONMENT = "prod";
+
 // src/auth/clerk-oauth.ts
 import crypto from "crypto";
 function createPkcePair() {
@@ -651,6 +654,9 @@ function getAuthTokenExpiry(accessToken) {
 function usesStoredSession2(config) {
   return config.refreshTokenSource === "global";
 }
+async function loadProjectContextCredentials(requireAuth2, loadCredentials = getStoredSession) {
+  return requireAuth2 ? loadCredentials() : void 0;
+}
 async function resolveProjectContext(flags, opts) {
   const projectRoot = await findProjectRoot(process.cwd());
   if (!projectRoot) {
@@ -659,12 +665,13 @@ async function resolveProjectContext(flags, opts) {
     );
   }
   const projectConfig = await loadProjectConfig(projectRoot);
+  const requireAuthForContext = opts?.requireAuth !== false;
   const [globalConfig, credentials] = await Promise.all([
     loadGlobalConfig(),
-    getStoredSession()
+    loadProjectContextCredentials(requireAuthForContext)
   ]);
   const config = resolveConfig(globalConfig, flags, projectConfig, credentials);
-  if (opts?.requireAuth !== false) {
+  if (requireAuthForContext) {
     requireAuth(config);
     await configureClient(config);
   }
@@ -4233,6 +4240,8 @@ export {
   buildClerkAuthorizationUrl,
   exchangeClerkOAuthCode,
   exchangeDreamboardUserToken,
+  IS_PUBLISHED_BUILD,
+  PUBLISHED_ENVIRONMENT,
   createUserTokenManager,
   resolveLocalHarnessAccessToken,
   resolveConfig,
@@ -4295,4 +4304,4 @@ export {
   generateReducerNativeArtifacts,
   runReducerNativeScenarios
 };
-//# sourceMappingURL=chunk-ITT6Y7MM.js.map
+//# sourceMappingURL=chunk-2WB3DYW4.js.map